Skip to content

GetADUsers

Description

This script will gather data about the domain's users and their corresponding email addresses. It will also include some extra information about last logon and last password set attributes. You can enable or disable the the attributes shown in the final table by changing the values in line 184 and headers in line 190. If no entries are returned that means users don't have email addresses specified. If so, you can use the -all-users parameter.

Usage

GetADUsers.py -all -dc-ip 10.10.10.10 qu35t.pw/svc_user:password 
GetADUsers.py -user administrator -dc-ip 10.10.10.10 qu35t.pw/svc_user:password
GetADUsers.py -all -debug -dc-ip 10.10.10.10 qu35t.pw/svc_user:password

Authentication

GetADUsers.py -all -hashes LMHASH:NTHASH -dc-ip 10.10.10.10 qu35t.pw/svc_user
GetADUsers.py -all -no-pass -dc-ip 10.10.10.10 qu35t.pw/svc_user
export KRB5CCNAME=svc_user.ccache
GetADUsers.py -all -k -no-pass -dc-host dc1.qu35t.pw qu35t.pw/svc_user

References